Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/cAAFdZGeVooBzCSUhqsDEyrnbqI.roa
File: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (raw, json)
Hash identifier: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=
Subject key identifier: 70:00:05:75:91:9E:56:8A:01:CC:24:94:86:AB:03:13:2A:E7:6E:A2
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019424B374D320E8E76FAEFBAF7BBE32CF90
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/cAAFdZGeVooBzCSUhqsDEyrnbqI.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 5.8.184.0/21 maxlen: 24
5.152.168.0/21 maxlen: 24
37.1.176.0/21 maxlen: 24
185.15.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:74:d3:20:e8:e7:6f:ae:fb:af:7b:be:32:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70000575919e568a01cc249486ab03132ae76ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:31:f3:2d:95:77:b8:71:82:59:db:37:70:
4d:85:c3:bf:a1:60:1b:3d:05:d1:93:5f:9c:ab:98:
17:6a:89:88:1e:e6:3d:25:c7:2a:cb:1c:d8:53:34:
17:3d:e4:63:df:6e:00:77:d3:0d:6f:41:71:e5:34:
82:7c:11:95:69:5a:29:62:34:92:d4:77:76:c4:44:
60:de:a9:04:e3:83:6f:60:55:a2:32:10:f1:ba:68:
2e:ee:83:53:91:27:ab:4a:6d:b2:bd:1e:5e:cf:4d:
69:51:da:f5:40:dc:6f:35:bc:ff:a7:78:14:1a:74:
5d:d0:a0:87:0a:83:3e:9b:03:a4:6f:2e:56:6a:fb:
33:56:36:20:24:04:7f:d0:cf:1f:cc:83:3f:94:e8:
fb:5c:ef:43:32:b7:27:0d:6e:c1:0d:99:1c:a8:89:
51:61:67:84:a0:d7:75:54:45:0d:22:69:aa:06:e0:
2d:7a:13:9e:f4:6b:be:d0:bc:99:c1:7c:0e:f5:d5:
4f:ea:3f:78:ef:4b:09:02:52:cd:73:62:4c:f9:92:
7b:66:18:2e:39:e7:74:d1:ff:0e:5d:bd:eb:53:0e:
92:91:82:ce:1e:65:da:89:d0:8f:e1:9a:08:b9:f4:
71:02:51:9b:bb:ce:75:7e:fd:ff:cb:18:ec:8f:b8:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:05:75:91:9E:56:8A:01:CC:24:94:86:AB:03:13:2A:E7:6E:A2
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/cAAFdZGeVooBzCSUhqsDEyrnbqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/21
5.152.168.0/21
37.1.176.0/21
185.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:0c:d5:14:94:db:a3:9c:53:b1:a7:11:07:ca:d0:44:1a:80:
d1:b5:2d:b3:28:1b:2c:a0:05:c2:1a:9b:c8:2d:0f:04:ba:e7:
17:ef:ff:ca:28:ee:2c:3e:eb:d8:2a:6b:fc:f7:fd:9e:95:40:
94:ed:34:67:ec:a6:d2:18:be:5d:44:9b:4b:70:ff:4a:6d:38:
59:50:98:42:5c:ea:14:46:54:f7:bc:aa:72:90:cd:97:5c:7c:
74:5c:2d:3d:a1:44:3d:30:a8:43:9b:c9:c5:a1:58:ac:98:67:
d5:f8:40:75:dc:bc:95:74:a3:03:db:53:e8:fb:5e:d0:1d:ac:
fc:9e:8d:73:72:ea:2f:39:78:b7:8a:8f:49:30:02:5c:9d:17:
c5:90:9e:94:7b:8f:8e:98:cb:0a:50:81:b7:f9:f6:1b:be:62:
99:d9:3d:f4:0a:51:1e:a9:69:ac:c4:b6:5b:01:d8:a2:fd:db:
43:c5:35:b0:e3:ea:7f:f2:50:a5:6f:25:cd:23:0e:e8:76:d2:
86:c5:ed:fa:9d:94:c7:d7:98:1d:c1:2b:00:41:bc:52:d9:cd:
6d:c4:4e:d0:34:bb:75:6c:d4:41:db:61:c0:19:5c:17:9c:2f:
62:95:41:dc:97:fc:fd:11:f5:f6:06:9e:64:0b:fc:4d:56:54:
db:f9:47:5c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQks3TTIOjnb677r3u+Ms+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjUwMTAyMDE0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDAwMDU3NTkxOWU1NjhhMDFjYzI0OTQ4NmFiMDMxMzJhZTc2ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8wx8y2Vd7hxglnbN3BNhcO/oWAb
PQXRk1+cq5gXaomIHuY9JccqyxzYUzQXPeRj324Ad9MNb0Fx5TSCfBGVaVopYjSS
1Hd2xERg3qkE44NvYFWiMhDxumgu7oNTkSerSm2yvR5ez01pUdr1QNxvNbz/p3gU
GnRd0KCHCoM+mwOkby5WavszVjYgJAR/0M8fzIM/lOj7XO9DMrcnDW7BDZkcqIlR
YWeEoNd1VEUNImmqBuAtehOe9Gu+0LyZwXwO9dVP6j9470sJAlLNc2JM+ZJ7Zhgu
Oed00f8OXb3rUw6SkYLOHmXaidCP4ZoIufRxAlGbu851fv3/yxjsj7gbIQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHAABXWRnlaKAcwklIarAxMq526iMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvY0FBRmRaR2VWb29CekNTVWhxc0RFeXJuYnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBQi4AwQD
BZioAwQDJQGwAwQCuQ9kMA0GCSqGSIb3DQEBCwUAA4IBAQBsDNUUlNujnFOxpxEH
ytBEGoDRtS2zKBssoAXCGpvILQ8EuucX7//KKO4sPuvYKmv89/2elUCU7TRn7KbS
GL5dRJtLcP9KbThZUJhCXOoURlT3vKpykM2XXHx0XC09oUQ9MKhDm8nFoVismGfV
+EB13LyVdKMD21Po+17QHaz8no1zcuovOXi3io9JMAJcnRfFkJ6Ue4+OmMsKUIG3
+fYbvmKZ2T30ClEeqWmsxLZbAdii/dtDxTWw4+p/8lClbyXNIw7odtKGxe36nZTH
15gdwSsAQbxS2c1txE7QNLt1bNRB22HAGVwXnC9ilUHcl/z9EfX2Bp5kC/xNVlTb
+Udc
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:27 2025 by rpki-client